Biblical Assistant

Biblical Assistant — Privacy Policy

Last updated: 8 September 2026 (draft — see the note at the end).

This Privacy Policy explains how the Biblical Assistant mobile application (package com.biblicalassistant.app, the "App") handles information. It is written to meet the EU General Data Protection Regulation (GDPR) and the law of the Republic of Lithuania.

Who is responsible (data controller)

The App is provided by Martin Liminovic, self-employed (individuali veikla), Lithuania. Contact for privacy matters: biblical.assist@gmail.com

We are the controller of the data described below.

The short version

You can read the Bible in this App without giving us anything. Reading, highlighting, notes, search and the dictionaries all work on your device alone, and what you write stays there.

Two things change that, and only if you choose them:

What reaches us, and when

When you download a translation or dictionary
The request and your IP address, as with any HTTPS request, so that we can send you the file.
When you open a verse with the assistant
Which verse, in which translation, your interface language and the chosen theme; a per-install identifier and the App version. Used to build the answer and to count it against abuse limits.
When you sign in with Google
Your email address and your Google account identifier, so that we know whose notes and subscription these are.
While you are signed in and you edit a note or highlight
The note or highlight itself, so that it reaches your other devices.
When you write to support
The text you wrote, plus App version, device model, system version and language, so that the message can be read and answered.
When you subscribe
A purchase receipt from Google Play, so that we can check with Google that the subscription is real.
When the App fails, or a request of ours does not answer
A crash report: what failed and where in our code, the App version, your phone model and Android version, and which of our own addresses did not answer.

We never receive your payment details. Google Play takes the payment; we only ask Google whether a receipt is valid.

The assistant's answers are written by Google Gemini, called from our server and never from your phone. We send it the verse and its surrounding text. We do not pass on any identifier, so it cannot be told which reader asked.

What never leaves your device unless you sign in

Your notes, highlights and marks, your reading position, your fonts, theme and colour, your searches, and every text you downloaded. Without an account none of it is transmitted at all.

Where it is kept, and for how long

Your account — identifier, email, Google id, subscription state
AWS DynamoDB, Stockholm (eu-north-1) — until you delete it in the App.
Your mirrored notes and highlights
AWS, Stockholm — until you delete them, or delete the account.
Two one-way hashes recording that a free trial was opened
AWS DynamoDB, Stockholm — kept after deletion; see section 8.
Your support tickets and their answers
AWS DynamoDB, Stockholm — while the account exists; erased with it.
The support chat transcript
AWS S3, Stockholm — 24 hours.
Generated answers, stored so the same verse need not be paid for twice, with no identifier attached
AWS S3, Stockholm — 30 days.
Abuse counters: a per-install identifier and a number
AWS DynamoDB, Stockholm — about a day.
Server logs: route, result and timings
AWS CloudWatch, Stockholm — 30 days.
Crash reports
Sentry, European Union region — 30 days.

Our servers and storage are in the European Union. Google Gemini is operated by Google and may process the verse text outside the EU under Google's own terms; no identifier of yours is included.

Legal basis

Reading, downloading texts and asking the assistant: performance of a contract — you asked the App to do it. Your account, your mirrored notes and your subscription: performance of a contract. Abuse limits, server logs and crash reports: our legitimate interest in keeping the service running, affordable and repairable.

No advertising, and the one third party there is

There are no adverts, no advertising identifiers, no behavioural analytics and no tracking of you across apps or sites. We do not sell or share your data.

One third party does receive something, and it is named rather than hidden: Sentry, which stores the crash reports described above in its European Union region. It is told what broke and on which model of phone. It is never sent your notes, your highlights, the verses you read, your email, or a picture of your screen.

Your rights

You can ask us to show you what we hold, correct it, delete it, hand it over in a portable form, or object to it. Write to biblical.assist@gmail.com and we will answer within one month.

Deleting everything is one action inside the App. Open Settings and choose "Delete account": your account, the server's copies of your notes, your support tickets and your chat transcript are all erased at once. The notes on your own phone stay — they were yours before there was an account. Uninstalling removes those too.

Two things survive that deletion, and only two. We keep a one-way hash of your Google account identifier, and a one-way hash of a per-install identifier for the phone, each with the date your free trial was opened — no name, no email, nothing that can be read back into an address or a device. Without them, deleting the account and signing in again would hand out fresh free days for ever, and the subscription would be optional for anyone willing to press a button twice. The second mark exists because the first alone can be walked around with a new Google account. We keep them under our legitimate interest in preventing that, and for nothing else.

Children

The App is not directed at children and asks for no age. Signing in requires a Google account, which Google's own rules already age-gate.

Changes

If what we collect changes, this document changes with it, and the date above moves. Treat any new outbound call as a change to this page, made in the same breath.

Note on status

This text is a draft prepared by the developer and is not legal advice. The App handles an email address and user-written content for a controller established in Lithuania, so the GDPR applies in full.